obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
CVE-2026-115478
### Summary `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and `delete_entity` regenerate a memory
#severity:high
共收录 5396 条相关情报。
← 返回所有主题SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream
CVE-2026-73054
### Summary Two checks on the same WebSocket request URI parse it differently. The authentication exemption for keepali
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in...
CVE-2026-115863
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/cl
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
CVE-2026-87901
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the...
CVE-2026-110975
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version...
CVE-2026-19678
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase For
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler...
CVE-2026-115486
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer addres
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly...
CVE-2026-115484
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of
Authentication tokens issued by the E3's web management interface on login are given an...
CVE-2026-96616
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any r
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and...
CVE-2026-110825
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON...
CVE-2026-92450
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HM
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute...
CVE-2026-96185
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate...
CVE-2026-108456
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a networ
Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker...
CVE-2026-112330
Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a co
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer...
CVE-2026-112332
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a re
Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker...
CVE-2026-112331
Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c...
CVE-2026-115504
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-contr
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability...
CVE-2026-115508
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib...
CVE-2026-115505
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap
libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs...
CVE-2026-115506
libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTol